Open Access. Powered by Scholars. Published by Universities.®
- Discipline
-
- Physical Sciences and Mathematics (9373)
- Social and Behavioral Sciences (9192)
- Computer Sciences (9065)
- Business (6917)
- International and Area Studies (3689)
-
- Asian Studies (3597)
- Databases and Information Systems (3567)
- Economics (2446)
- Law (2307)
- Software Engineering (2227)
- Artificial Intelligence and Robotics (1922)
- Finance and Financial Management (1292)
- Public Affairs, Public Policy and Public Administration (1144)
- Information Security (1120)
- Sociology (1117)
- Engineering (1102)
- Psychology (1081)
- Organizational Behavior and Theory (1064)
- Numerical Analysis and Scientific Computing (1060)
- Graphics and Human Computer Interfaces (959)
- Accounting (917)
- Education (903)
- Econometrics (824)
- Communication (823)
- Technology and Innovation (821)
- Strategic Management Policy (732)
- Arts and Humanities (692)
- Corporate Finance (665)
- Political Science (665)
- Higher Education (599)
- Keyword
-
- Singapore (1058)
- China (354)
- Singapore Management University (275)
- Innovation (206)
- COVID-19 (178)
-
- Machine learning (176)
- Artificial intelligence (145)
- Social media (137)
- Deep learning (135)
- Sustainability (130)
- Higher education (129)
- Corporate governance (117)
- Culture (113)
- Asia (110)
- Technology (109)
- Trust (97)
- Pandemic (92)
- Creativity (85)
- Performance (84)
- Well-being (84)
- Leadership (83)
- Education (81)
- Privacy (78)
- Climate change (77)
- Data mining (77)
- Reinforcement learning (74)
- India (73)
- Collaboration (72)
- Marketing (71)
- Southeast Asia (70)
- Publication Year
- Publication
-
- Research Collection School Of Computing and Information Systems (8722)
- Research Collection Lee Kong Chian School Of Business (3274)
- Research Collection School of Social Sciences (2262)
- Research Collection Yong Pung How School Of Law (2078)
- Research Collection School Of Economics (1760)
-
- Dissertations and Theses Collection (Open Access) (894)
- Research Collection School Of Accountancy (816)
- Perspectives@SMU (663)
- Research Collection College of Integrative Studies (534)
- Knowledge@SMU (403)
- Asian Management Insights (317)
- SMU Press Releases and News (243)
- Research Collection Library (223)
- Social Space (210)
- Research Collection Institute of Service Excellence (2007-2024) (85)
- Sim Kee Boon Institute for Financial Economics (62)
- Oral History Collection (50)
- Singapore Law Journal (Lexicon) (50)
- Digital Narratives of Asia (46)
- Dissertations and Theses Collection (45)
- Research@SMU: Connecting the Dots (45)
- Research Collection BNP Paribas Hedge Fund Centre (37)
- ROSA Research Briefs (34)
- Report to Stakeholders (25)
- Lien Centre for Social Innovation: Research (22)
- Research Collection Lee Kong Chian School of Business (22)
- Research Collection Office of Impact (21)
- CCX Research (20)
- Friends of the Museum Collection (20)
- SMU Corporate Reports (19)
- Publication Type
- File Type
Articles 2881 - 2910 of 23256
Full-Text Articles in Entire DC Network
Ceo Emotional Stability And Firm Innovation, Manli Liu
Ceo Emotional Stability And Firm Innovation, Manli Liu
Dissertations and Theses Collection (Open Access)
This dissertation aims to examine whether and how CEO emotional stability influences firm innovation. I argue that CEO emotional stability enables firms to create a friendly innovation climate within the firm as well as secure resources from external stakeholders, thus helping firm innovation. Moreover, CEO education, slack resources, firm age, and market complexity strengthen the relationship between CEO emotional stability and firm innovation. Two-wave surveys are conducted to collect the data to test the hypotheses. This dissertation aims to extend the literature on emotional stability as well as innovation from the upper echelons perspective.
Uniform Nonparametric Inference For Spatially Dependent Panel Data, Jia Li, Zhipeng Liao, Wenyu Zhou
Uniform Nonparametric Inference For Spatially Dependent Panel Data, Jia Li, Zhipeng Liao, Wenyu Zhou
Research Collection School Of Economics
This article proposes a uniform functional inference method for nonparametric regressions in a panel-data setting that features general unknown forms of spatio-temporal dependence. The method requires a long time span, but does not impose any restriction on the size of the cross section or the strength of spatial correlation. The uniform inference is justified via a new growing-dimensional Gaussian coupling theory for spatio-temporally dependent panels. We apply the method in two empirical settings. One concerns the nonparametric relationship between asset price volatility and trading volume as depicted by the mixture of distribution hypothesis. The other pertains to testing the rationality …
Wild Bootstrap Inference For Instrumental Variables Regressions With Weak And Few Clusters, Wenjie Wang, Yichong Zhang
Wild Bootstrap Inference For Instrumental Variables Regressions With Weak And Few Clusters, Wenjie Wang, Yichong Zhang
Research Collection School Of Economics
We study the wild bootstrap inference for instrumental variable regressions under an alternative asymptotic framework that the number of independent clusters is fixed, the size of each cluster diverges to infinity, and the within cluster dependence is sufficiently weak. We first show that the wild bootstrap Wald test controls size asymptotically up to a small error as long as the parameters of endogenous variables are strongly identified in at least one of the clusters. Second, we establish the conditions for the bootstrap tests to have power against local alternatives. We further develop a wild bootstrap Anderson–Rubin test for the full-vector …
Housing Markets Since Shapley And Scarf, Mustafa Oguz Afacan, Gaoji Hu, Jiangtao Li
Housing Markets Since Shapley And Scarf, Mustafa Oguz Afacan, Gaoji Hu, Jiangtao Li
Research Collection School Of Economics
Shapley and Scarf (1974) appeared in the first issue of the Journal of Mathematical Economics, and is one of the journal’s most impactful publications. As we approach the remarkable milestone of the journal’s 50th anniversary (1974–2024), this article serves as a commemorative exploration of Shapley and Scarf (1974) and the extensive body of literature that follows it.
Hiv Estimation Using Population Based Surveys With Non-Response: A Partial Identification Approach, Oyelola A Adegboye, Tomoki Fujii, Denis H. Y. Leung, Siyu Li
Hiv Estimation Using Population Based Surveys With Non-Response: A Partial Identification Approach, Oyelola A Adegboye, Tomoki Fujii, Denis H. Y. Leung, Siyu Li
Research Collection School Of Economics
HIV estimation using data from the Demographic and Health Surveys (DHS) is lim-ited by the presence of non-response and test refusals. Conventional adjustments such as imputation require the data to be missing at random. Methods that use instrumental variables allow the possibility that prevalence is different between the respondents and non-respondents, but their performance depends critically on the validity of the instru-ment. Using Manski’s partial identification approach, we form instrumental variable bounds for HIV prevalence from a pool of candidate instruments. Our method does not require all candidate instruments to be valid. We use a simulation study to evaluate and …
Mut: Human-In-The-Loop Unit Test Migration, Yi Gao, Xing Hu, Tongtong Xu, Xin Xia, David Lo, Xiaohu Yang
Mut: Human-In-The-Loop Unit Test Migration, Yi Gao, Xing Hu, Tongtong Xu, Xin Xia, David Lo, Xiaohu Yang
Research Collection School Of Computing and Information Systems
Test migration, which enables the reuse of test cases crafted with knowledge and creativity by testers across various platforms and programming languages, has exhibited effectiveness in mobile app testing. However, unit test migration at the source code level has not garnered adequate attention and exploration. In this paper, we propose a novel cross-language and cross-platform test migration methodology, named MUT, which consists of four modules: code mapping, test case filtering, test case translation, and test case adaptation. MUT initially calculates code mappings to establish associations between source and target projects, and identifies suitable unit tests for migration from the source …
Deep Reinforcement Learning For Dynamic Algorithm Selection: A Proof-Of-Principle Study On Differential Evolution, Hongshu Guo, Yining Ma, Zeyuan Ma, Jiacheng Chen, Xinglin Zhang, Zhiguang Cao, Jun Zhang, Yue-Jiao Gong
Deep Reinforcement Learning For Dynamic Algorithm Selection: A Proof-Of-Principle Study On Differential Evolution, Hongshu Guo, Yining Ma, Zeyuan Ma, Jiacheng Chen, Xinglin Zhang, Zhiguang Cao, Jun Zhang, Yue-Jiao Gong
Research Collection School Of Computing and Information Systems
Evolutionary algorithms, such as differential evolution, excel in solving real-parameter optimization challenges. However, the effectiveness of a single algorithm varies across different problem instances, necessitating considerable efforts in algorithm selection or configuration. This article aims to address the limitation by leveraging the complementary strengths of a group of algorithms and dynamically scheduling them throughout the optimization progress for specific problems. We propose a deep reinforcement learning-based dynamic algorithm selection framework to accomplish this task. Our approach models the dynamic algorithm selection a Markov decision process, training an agent in a policy gradient manner to select the most suitable algorithm according …
Discovering Significant Topics From Legal Decisions With Selective Inference, Jerrold Tsin Howe Soh
Discovering Significant Topics From Legal Decisions With Selective Inference, Jerrold Tsin Howe Soh
Research Collection Yong Pung How School Of Law
We propose and evaluate an automated pipeline for discovering significant topics from legal decision texts by passing features synthesized with topic models through penalized regressions and post-selection significance tests. The method identifies case topics significantly correlated with outcomes, topic-word distributions which can be manually interpreted to gain insights about significant topics, and case-topic weights which can be used to identify representative cases for each topic. We demonstrate the method on a new dataset of domain name disputes and a canonical dataset of European Court of Human Rights violation cases. Topic models based on latent semantic analysis as well as language …
Constitutional Supremacy, Inherent Powers, And Orders That Damages Or Costs Be Paid In Instalments: Tan Meow Hiang V Ong Kay Yong [2023] Sghc 286, Benjamin Joshua Ong
Constitutional Supremacy, Inherent Powers, And Orders That Damages Or Costs Be Paid In Instalments: Tan Meow Hiang V Ong Kay Yong [2023] Sghc 286, Benjamin Joshua Ong
Research Collection Yong Pung How School Of Law
The General Division of the High Court of Singapore stated (obiter) in Tan Meow Hiang v Ong Kay Yong that it does not have a general power to order that damages or costs be paid in instalments. It reasoned that any such power must have been impliedly restricted by legislation. So instalment orders can only be made (a) by certain subordinate courts; (b) by the General Division on appeal; (c) by the General Division at first instance in personal injury cases. In response, this note aims to advance the conversation on the law on instalment orders and what the Constitution …
Legal Hypergraphs, Corinna Coupette, Dirk Hartung, Daniel Martin Katz
Legal Hypergraphs, Corinna Coupette, Dirk Hartung, Daniel Martin Katz
Research Collection Yong Pung How School Of Law
Complexity science provides a powerful framework for understanding physical, biological and social systems, and network analysis is one of its principal tools. Since many complex systems exhibit multilateral interactions that change over time, in recent years, network scientists have become increasingly interested in modelling and measuring dynamic networks featuring higher-order relations. At the same time, while network analysis has been more widely adopted to investigate the structure and evolution of law as a complex system, the utility of dynamic higher-order networks in the legal domain has remained largely unexplored. Setting out to change this, we introduce temporal hypergraphs as a …
Conceptualising State-Centric Mediation: An Analysis Of China's Foreign Investment Complaints Mechanism, Mark Mclaughlin
Conceptualising State-Centric Mediation: An Analysis Of China's Foreign Investment Complaints Mechanism, Mark Mclaughlin
Research Collection Yong Pung How School Of Law
This article argues that China's foreign investor complaints system constitutes 'state-centric investment mediation'. The Rules on Handling Complaints of Foreign-Invested Enterprises, which entered into force on 1 October 2020, place a state agency in the position of facilitating negotiations between a foreign investor and the agency being complained against. The prospects for this complaints system depend on how the state-as-mediator dynamic is perceived by foreign investors. To this end, it will be argued that settlement agreements reached pursuant to this system may be enforceable under the Singapore Convention on Mediation in certain circumstances. Investors and government entities operating similar systems …
Topological Spaces Of Embodied Becoming: Queens, Queerness And (Infra)Structural Subterfuge In Singapore, Orlando Woods
Topological Spaces Of Embodied Becoming: Queens, Queerness And (Infra)Structural Subterfuge In Singapore, Orlando Woods
Research Collection College of Integrative Studies
This paper considers the political potential that emerges when theorizations of the body-as-infrastructure are brought into conversation with theorizations of topological space. It argues that the infrastructural body provides an interface through which structural norms can be destabilized, and the interrelationships between the state, society, and self can be reimagined. These ideas are illustrated through an empirical exploration of drag queens in Singapore. Singapore is a socially conservative Asian city-state in which heteronormative values are passed down by the state, reproduced through the family, and then used to structure societal under- standings of gender and sexuality. By interpreting Singapore’s hegemonic …
Growing Natural Connections: The Effects Of Modality And Type Of Nature On Connectedness To Nature, Audria Huixuan Low, Carynn Yan Min Chung, Irene Jia Yi Cheong, Charmaine Xin Yu Loke, Sonny Rosenthal
Growing Natural Connections: The Effects Of Modality And Type Of Nature On Connectedness To Nature, Audria Huixuan Low, Carynn Yan Min Chung, Irene Jia Yi Cheong, Charmaine Xin Yu Loke, Sonny Rosenthal
Research Collection College of Integrative Studies
An important predictor of pro-environmental attitudes and behavior is connectedness to nature. However, current research lacks consensus on how to effectively cultivate it in individuals, particularly with media messages. To address this gap, this study investigated how the modality of nature experiences and type of nature influence connectedness to nature in young adults. Data collection involved 164 undergraduate students at a Singapore university who participated in a 2 (modality: physical tour vs video tour) × 2 (nature type: forested area vs botanic garden) factorial experiment. Results showed that nature type did not affect connectedness to nature, nor did fear or …
Does The Use Of Media And Other Information Sources Cause The Perceived Experience Of Climate Change Or Is It The Other Way Around?, Sonny Rosenthal, Pengya Ai
Does The Use Of Media And Other Information Sources Cause The Perceived Experience Of Climate Change Or Is It The Other Way Around?, Sonny Rosenthal, Pengya Ai
Research Collection College of Integrative Studies
The perceived experience of climate change can be an important motivator of individual climate action. Recent scholarship argued that the use of media and other information sources is a basis of perceived experience. The current study analyzed a cross-lagged panel model to know if the use of information causes perceived experience or vice versa. Analysis of longitudinal data from a sample of Singapore residents (N = 466) showed that the use of traditional media, but not social media or interpersonal sources, explained change in perceived experience. In contrast, perceived experience explained change in the use of traditional media and interpersonal …
Testing The Capability Of Ai Art Tools For Urban Design, Connor Phillips, Junfeng Jiao, Emmalee Clubb
Testing The Capability Of Ai Art Tools For Urban Design, Connor Phillips, Junfeng Jiao, Emmalee Clubb
Research Collection College of Integrative Studies
This study aimed to evaluate the performance of three artificial intelligence (AI) image synthesis models, Dall-E 2, Stable Diffusion, and Midjourney, in generating urban design imagery based on scene descriptions. A total of 240 images were generated and evaluated by two independent professional evaluators using an adapted sensibleness and specificity average metric. The results showed significant differences between the three AI models, as well as differing scores across urban scenes, suggesting that some projects and design elements may be more challenging for AI art generators to represent visually. Analysis of individual design elements showed high accuracy in common features like …
Filter-Based Stance Network For Rumor Verification, Jun Li, Yi Bin, Yunshan Ma, Yang Yang, Zi Huang, Tat‑Seng Chua
Filter-Based Stance Network For Rumor Verification, Jun Li, Yi Bin, Yunshan Ma, Yang Yang, Zi Huang, Tat‑Seng Chua
Research Collection School Of Computing and Information Systems
Rumor verification on social media aims to identify the truth value of a rumor, which is important to decreasethe detrimental public effects. A rumor might arouse heated discussions and replies, conveying differentstances of users that could be helpful in identifying the rumor. Thus, several works have been proposedto verify a rumor by modelling its entire stance sequence in the time domain. However, these works ignorethat such a stance sequence could be decomposed into controversies with different intensities, which could beused to cluster the stance sequences with the same consensus. In addition, the existing stance extractors fail toconsider both the impact …
Hop‑Based Heterogeneous Graph Transformer, Zixuan Yang, Xiao Wang, Yanhua Yu, Yuling Wang, Kangkang Lu, Zirui Guo, Xiting Qin, Yunshan Ma, Tat‑Seng Chua
Hop‑Based Heterogeneous Graph Transformer, Zixuan Yang, Xiao Wang, Yanhua Yu, Yuling Wang, Kangkang Lu, Zirui Guo, Xiting Qin, Yunshan Ma, Tat‑Seng Chua
Research Collection School Of Computing and Information Systems
The Graph Transformer (GT) has shown significant ability in processing graph-structured data, addressing limitations in graph neural networks, such as over-smoothing and over-squashing. However, the implementation of GT in real-world heterogeneous graphs (HGs) with complex topology continues to present numerous challenges. Firstly, a challenge arises in designing a tokenizer that is compatible with heterogeneity. Secondly, the complexity of the transformer hampers the acquisition of high-order neighbor information in HGs. In this paper, we propose a novel Hop-basedHeterogeneous Graph Transformer (H2Gormer) framework, paving a promising path for HGs to benefit from the capabilities of Transformers. We propose a Heterogeneous Hop-based Token …
Exploring The Potential Of Chatgpt In Automated Code Refinement: An Empirical Study, Qi Guo, Shangqing Liu, Junming Cao, Xiaohong Li, Xin Peng, Xiaofei Xie, Bihuan Chen
Exploring The Potential Of Chatgpt In Automated Code Refinement: An Empirical Study, Qi Guo, Shangqing Liu, Junming Cao, Xiaohong Li, Xin Peng, Xiaofei Xie, Bihuan Chen
Research Collection School Of Computing and Information Systems
Code review is an essential activity for ensuring the quality and maintainability of software projects. However, it is a time-consuming and often error-prone task that can significantly impact the development process. Recently, ChatGPT, a cutting-edge language model, has demonstrated impressive performance in various natural language processing tasks, suggesting its potential to automate code review processes. However, it is still unclear how well ChatGPT performs in code review tasks. To fill this gap, in this paper, we conduct the first empirical study to understand the capabilities of ChatGPT in code review tasks, specifically focusing on automated code refinement based on given …
W4-Groups: Modeling The Who, What, When And Where Of Group Behavior Via Mobility Sensing, Akansha Atrey, Camellia Zakaria, Rajesh Krishna Balan, Prashant Shenoy
W4-Groups: Modeling The Who, What, When And Where Of Group Behavior Via Mobility Sensing, Akansha Atrey, Camellia Zakaria, Rajesh Krishna Balan, Prashant Shenoy
Research Collection School Of Computing and Information Systems
Human social interactions occur in group settings of varying sizes and locations, depending on the type of social activity. The ability to distinguish group formations based on their purposes transforms how group detection mechanisms function. Not only should such tools support the effective detection of serendipitous encounters, but they can derive categories of relation types among users. Determining who is involved, what activity is performed, and when and where the activity occurs are critical to understanding group processes in greater depth, including supporting goal-oriented applications (e.g., performance, productivity, and mental health) that require sensing social factors. In this work, we …
Experience Report: Identifying Common Misconceptions And Errors Of Novice Programmers With Chatgpt, Hua Leong Fwa
Experience Report: Identifying Common Misconceptions And Errors Of Novice Programmers With Chatgpt, Hua Leong Fwa
Research Collection School Of Computing and Information Systems
Identifying the misconceptions of novice programmers is pertinent for informing instructors of the challenges faced by their students in learning computer programming. In the current literature, custom tools, test scripts were developed and, in most cases, manual effort to go through the individual codes were required to identify and categorize the errors latent within the students' code submissions. This entails investment of substantial effort and time from the instructors. In this study, we thus propose the use of ChatGPT in identifying and categorizing the errors. Using prompts that were seeded only with the student's code and the model code solution …
Improving Automated Code Reviews: Learning From Experience, Hong Yi Lin, Patanamon Thongtanunam, Christoph Treude, Wachiraphan Charoenwet
Improving Automated Code Reviews: Learning From Experience, Hong Yi Lin, Patanamon Thongtanunam, Christoph Treude, Wachiraphan Charoenwet
Research Collection School Of Computing and Information Systems
Modern code review is a critical quality assurance process that is widely adopted in both industry and open source software environments. This process can help newcomers learn from the feedback of experienced reviewers; however, it often brings a large workload and stress to reviewers. To alleviate this burden, the field of automated code reviews aims to automate the process, teaching large language models to provide reviews on submitted code, just as a human would. A recent approach pre-trained and fine-tuned the code intelligent language model on a large-scale code review corpus. However, such techniques did not fully utilise quality reviews …
Beyond A Joke: Dead Code Elimination Can Delete Live Code, Haoxin Tu, Lingxiao Jiang, Debin Gao, He Jiang
Beyond A Joke: Dead Code Elimination Can Delete Live Code, Haoxin Tu, Lingxiao Jiang, Debin Gao, He Jiang
Research Collection School Of Computing and Information Systems
Dead Code Elimination (DCE) is a fundamental compiler optimization technique that removes dead code (e.g., unreachable or reachable but whose results are unused) in the program to produce smaller or faster executables. However, since compiler optimizations are typically aggressively performed and there are complex relationships/interplay among a vast number of compiler optimizations (including DCE), it is not known whether DCE is indeed correctly performed and will only delete dead code in practice. In this study, we open a new research problem to investigate: can DCE happen to erroneously delete live code? To tackle this problem, we design a new approach …
Creative And Correct: Requesting Diverse Code Solutions From Ai, Scott Blyth, Markus Wagner, Christoph Treude
Creative And Correct: Requesting Diverse Code Solutions From Ai, Scott Blyth, Markus Wagner, Christoph Treude
Research Collection School Of Computing and Information Systems
AI foundation models have the capability to produce a wide array of responses to a single prompt, a feature that is highly beneficial in software engineering to generate diverse code solutions. However, this advantage introduces a significant trade-off between diversity and correctness. In software engineering tasks, diversity is key to exploring design spaces and fostering creativity, but the practical value of these solutions is heavily dependent on their correctness. Our study systematically investigates this trade-off using experiments with HumanEval tasks, exploring various parameter settings and prompting strategies. We assess the diversity of code solutions using similarity metrics from the code …
Enhancing Source Code Representations For Deep Learning With Static Analysis, Xueting Guan, Christoph Treude
Enhancing Source Code Representations For Deep Learning With Static Analysis, Xueting Guan, Christoph Treude
Research Collection School Of Computing and Information Systems
Deep learning techniques applied to program analysis tasks such as code classification, summarization, and bug detection have seen widespread interest. Traditional approaches, however, treat programming source code as natural language text, which may neglect significant structural or semantic details. Additionally, most current methods of representing source code focus solely on the code, without considering beneficial additional context. This paper explores the integration of static analysis and additional context such as bug reports and design patterns into source code representations for deep learning models. We use the Abstract Syntax Tree-based Neural Network (ASTNN) method and augment it with additional context information …
Impact Of Government Outsourcing Contracts On High-Tech Vendors: An Empirical Study, Yi Dong, Nan Hu, Yonghua Ji, Chenkai Ni, Jing Xie
Impact Of Government Outsourcing Contracts On High-Tech Vendors: An Empirical Study, Yi Dong, Nan Hu, Yonghua Ji, Chenkai Ni, Jing Xie
Research Collection School Of Computing and Information Systems
Outsourcing is an important strategic decision of high-tech firms. However, while the research has extensively studied the implications of outsourcing to high-tech clients, its impact on high-tech vendors remains underexplored. This study empirically estimates the impact of government outsourcing contracts on high-tech vendors. Employing the earnings-return analyses framework, we find that, for high-tech vendors engaged in government outsourcing contracts, the stock market places a higher value on each unit of unexpected earnings compared to other firms. Additionally, this impact becomes stronger for contracts with longer terms, for contracts outsourced by the U.S. government or by countries with better political and …
Unveiling Memorization In Code Models, Zhou Yang, Zhipeng Zhao, Chenyu Wang, Jieke Shi, Dongsun Kim, Donggyun Han, David Lo
Unveiling Memorization In Code Models, Zhou Yang, Zhipeng Zhao, Chenyu Wang, Jieke Shi, Dongsun Kim, Donggyun Han, David Lo
Research Collection School Of Computing and Information Systems
The availability of large-scale datasets, advanced architectures, and powerful computational resources have led to effective code models that automate diverse software engineering activities. The datasets usually consist of billions of lines of code from both open-source and private repositories. A code model memorizes and produces source code verbatim, which potentially contains vulnerabilities, sensitive information, or code with strict licenses, leading to potential security and privacy issues.This paper investigates an important problem: to what extent do code models memorize their training data? We conduct an empirical study to explore memorization in large pre-trained code models. Our study highlights that simply extracting …
Out Of Sight, Out Of Mind: Better Automatic Vulnerability Repair By Broadening Input Ranges And Sources, Xin Zhou, Kisub Kim, Bowen Xu, Donggyun Han, David Lo
Out Of Sight, Out Of Mind: Better Automatic Vulnerability Repair By Broadening Input Ranges And Sources, Xin Zhou, Kisub Kim, Bowen Xu, Donggyun Han, David Lo
Research Collection School Of Computing and Information Systems
The advances of deep learning (DL) have paved the way for automatic software vulnerability repair approaches, which effectively learn the mapping from the vulnerable code to the fixed code. Nevertheless, existing DL-based vulnerability repair methods face notable limitations: 1) they struggle to handle lengthy vulnerable code, 2) they treat code as natural language texts, neglecting its inherent structure, and 3) they do not tap into the valuable expert knowledge present in the expert system. To address this, we propose VulMaster, a Transformer-based neural network model that excels at generating vulnerability repairs by comprehensively understanding the entire vulnerable code, irrespective of …
Ps3: Precise Patch Presence Test Based On Semantic Symbolic Signature, Qi Zhan, Xing Hu, Zhiyang Li, Xin Xia, David Lo, Shanping Li
Ps3: Precise Patch Presence Test Based On Semantic Symbolic Signature, Qi Zhan, Xing Hu, Zhiyang Li, Xin Xia, David Lo, Shanping Li
Research Collection School Of Computing and Information Systems
During software development, vulnerabilities have posed a significant threat to users. Patches are the most effective way to combat vulnerabilities. In a large-scale software system, testing the presence of a security patch in every affected binary is crucial to ensure system security. Identifying whether a binary has been patched for a known vulnerability is challenging, as there may only be small differences between patched and vulnerable versions. Existing approaches mainly focus on detecting patches that are compiled in the same compiler options. However, it is common for developers to compile programs with very different compiler options in different situations, which …
Coca: Improving And Explaining Graph Neural Network-Based Vulnerability Detection Systems, Sicong Cao, Xiaobing Sun, Xiaoxue Wu, David Lo, Lili Bo, Bin Li, Wei Liu
Coca: Improving And Explaining Graph Neural Network-Based Vulnerability Detection Systems, Sicong Cao, Xiaobing Sun, Xiaoxue Wu, David Lo, Lili Bo, Bin Li, Wei Liu
Research Collection School Of Computing and Information Systems
Recently, Graph Neural Network (GNN)-based vulnerability detection systems have achieved remarkable success. However, the lack of explainability poses a critical challenge to deploy black-box models in security-related domains. For this reason, several approaches have been proposed to explain the decision logic of the detection model by providing a set of crucial statements positively contributing to its predictions. Unfortunately, due to the weakly-robust detection models and suboptimal explanation strategy, they have the danger of revealing spurious correlations and redundancy issue.In this paper, we propose Coca, a general framework aiming to 1) enhance the robustness of existing GNN-based vulnerability detection models to …
Exploiting Library Vulnerability Via Migration-Based Automated Test Generation, Zirui Chen, Xing Hu, Xin Xia, Yi Gao, Tongtong Xu, David Lo, Xiaohu Yang
Exploiting Library Vulnerability Via Migration-Based Automated Test Generation, Zirui Chen, Xing Hu, Xin Xia, Yi Gao, Tongtong Xu, David Lo, Xiaohu Yang
Research Collection School Of Computing and Information Systems
In software development, developers extensively utilize third-party libraries to avoid implementing existing functionalities. When a new third-party library vulnerability is disclosed, project maintainers need to determine whether their projects are affected by the vulnerability, which requires developers to invest substantial effort in assessment. However, existing tools face a series of issues: static analysis tools produce false alarms, dynamic analysis tools require existing tests and test generation tools have low success rates when facing complex vulnerabilities.Vulnerability exploits, as code snippets provided for reproducing vulnerabilities after disclosure, contain a wealth of vulnerability-related information. This study proposes a new method based on vulnerability …